A Trust Wallet user has reported that 3,830 USDT was transferred out of his wallet without his approval. The user, Iaroslav Dubovoi (@noirvox_studio), posted on X on November 3 that he opened the app to find his funds gone, with no warning and no request to approve a transaction. The post has drawn more than 166,000 views. The cause of the transfer has not been identified.
User Account and Transaction Details
Dubovoi said blockchain records showed the funds had been moved, but he could not explain how. He later posted a transaction hash linked to the missing USDT. He said he had used the same wallet for about five years and had always taken steps to protect his crypto holdings. The blockchain network, receiving address, and other transfer details were not established in his posts. The transaction hash provides a starting point for tracing where the funds went.
Trust Wallet is a self-custody wallet, meaning users hold the private keys needed to approve transactions, unlike on centralized exchanges where the platform manages customer assets.
How Funds Can Move Without a New Approval
Unauthorized transfers can occur through several methods, including stolen private keys, harmful smart contract permissions, and misleading transaction signatures. Some of these methods do not require a fresh approval at the moment funds leave. In an October investigation, blockchain security firm Salus found malicious USDG permit signatures that gave attackers spending rights over victims’ tokens. In those cases, attackers used permissions they had already obtained to move tokens without the victim approving each transfer.
Trust Wallet recently warned users about a fake website copying its crypto card service. The site was designed to trick users into connecting wallets and possibly signing harmful transactions, which can let others move certain tokens without the recovery phrase.
In December 2025, Trust Wallet confirmed that version 2.68 of its Chrome extension allowed attackers to drain funds without transaction approvals. Blockchain investigator ZachXBT first flagged the suspicious transfers after users reported withdrawals. Attackers had gained access to the extension’s source code and pushed a malicious version through the Chrome Web Store. Losses reached about $7 million, and former Binance CEO Changpeng Zhao confirmed that affected users would be compensated.
Separate Incident Involving Fake Support
Also on November 3, an X user called Mister Tee (@meeyatariq) said his wallet was drained after contact with someone posing as support on NEAR Protocol’s Discord server. His screenshots showed outgoing transfers of ETH, BTC, BNB, and NEAR, including 3 NEAR worth about $11.49. Unlike Mister Tee, Dubovoi did not link his loss to any outside contact and has said he approved nothing before the funds disappeared.
Trust Wallet has advised users not to share recovery phrases or private keys and to rely on official support channels when investigating suspicious activity. A separate user, Abdul (@HasbullahAbdulH), complained on X about problems swapping tokens. The verified Trust Wallet Support account replied on November 4 and pointed him to a guide on failed swaps, stuck transactions, and receiving unexpected amounts.
